$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b5d1c046-7426-324d-b8c1-cb2fe923742e.roa File: b5d1c046-7426-324d-b8c1-cb2fe923742e.roa (raw, json) Hash identifier: twwu5JoW+36/bNSt7NpMtdrpYmO3/d1h4UuKwIiU7QI= Subject key identifier: 9E:00:7C:85:42:4B:FA:65:C0:F9:B7:12:0D:6F:B9:A0:79:82:A4:31 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858494B6425D7A4F8A51783914980 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b5d1c046-7426-324d-b8c1-cb2fe923742e.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 397225 IP address blocks: 156.154.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:25:d7:a4:f8:a5:17:83:91:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=3ff5c8e9-d6e2-4d80-b6c0-ab64ecb49539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bc:16:18:45:3c:0f:38:60:8b:12:b4:62:65: 93:64:89:00:64:b8:ea:f3:b1:10:91:9b:3e:d0:2c: b4:02:fd:06:0c:cc:91:46:73:8a:0a:ad:0d:d4:b2: 1e:bd:99:13:72:31:95:9f:72:18:3b:5f:48:f0:ad: 0b:26:97:86:3e:e3:e6:b0:ac:0e:5a:58:b6:bf:2e: 8d:16:85:cf:76:b6:da:44:65:53:ef:4c:fd:b6:09: 5e:fc:01:92:4d:b9:80:65:98:a7:26:e7:1d:79:ac: d8:3e:8c:3a:d3:f6:73:ea:73:b2:16:9b:a5:08:4d: ad:91:87:c8:ae:ce:ea:ba:ef:98:fe:bd:15:a8:67: cf:4f:c9:4e:3e:90:6d:a0:01:fa:c3:03:13:ba:2a: 1c:07:91:8f:06:c0:fb:3b:18:cf:b3:39:fb:ab:39: 27:98:ef:62:48:08:59:b1:d6:a0:b9:41:2d:5f:ac: 0e:61:50:01:21:49:a5:bc:77:f2:94:fd:00:58:50: e9:50:65:6f:39:93:38:95:21:88:80:4b:9c:ea:16: 32:41:d8:cc:ae:f6:02:db:9d:e9:1d:00:fe:a4:11: b0:d9:46:57:13:60:45:2d:39:22:bc:6f:6d:f2:21: 6e:90:7b:60:cc:5e:47:66:3a:54:58:6e:fc:86:b8: 83:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:00:7C:85:42:4B:FA:65:C0:F9:B7:12:0D:6F:B9:A0:79:82:A4:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b5d1c046-7426-324d-b8c1-cb2fe923742e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:3e:34:0b:97:55:b5:00:0a:d1:8b:b4:c5:69:15:b0:a9:bc: af:42:a7:7a:29:af:f0:67:bc:b3:ec:80:6b:74:36:c0:f3:fb: 1f:e8:f6:6b:d3:04:87:76:05:13:93:d6:82:54:b9:26:a8:5f: f7:ca:03:21:0a:a4:23:09:72:92:55:bd:fb:42:47:90:25:c3: 57:d6:82:05:8c:84:9a:6e:d1:61:08:6b:1b:21:4e:0c:83:be: eb:3d:99:0f:ed:94:81:39:d8:2b:e4:1f:8c:c9:22:70:06:44: 83:af:e7:81:d9:10:bb:90:0f:d2:c0:55:29:ed:43:3e:d7:2f: 2b:da:7d:3c:61:f3:64:a8:51:66:64:6a:c3:a3:45:00:31:b1: 33:b7:35:97:a2:63:a8:17:aa:c1:7b:29:4b:51:eb:36:d3:d4: 20:64:fe:6f:0d:53:1b:dd:12:18:6e:03:1a:67:ac:7d:34:52: e0:5a:7a:61:04:d4:d7:87:28:59:62:c0:63:ed:d1:6f:35:14: 8e:ee:36:60:7a:9a:41:ec:20:cb:9c:85:31:6a:74:e5:20:5d: fa:36:41:73:5d:55:76:01:38:a5:99:61:c5:3a:e5:df:71:74: 46:98:39:16:40:5f:90:1d:b8:36:40:3c:6a:55:81:eb:41:32: 61:b5:7a:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZCXXpPilF4ORSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk M2ZmNWM4ZTktZDZlMi00ZDgwLWI2YzAtYWI2NGVjYjQ5NTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbwWGEU8DzhgixK0YmWTZIkAZLjq87EQkZs+ 0Cy0Av0GDMyRRnOKCq0N1LIevZkTcjGVn3IYO19I8K0LJpeGPuPmsKwOWli2vy6N FoXPdrbaRGVT70z9tgle/AGSTbmAZZinJucdeazYPow60/Zz6nOyFpulCE2tkYfI rs7quu+Y/r0VqGfPT8lOPpBtoAH6wwMTuiocB5GPBsD7OxjPszn7qzknmO9iSAhZ sdaguUEtX6wOYVABIUmlvHfylP0AWFDpUGVvOZM4lSGIgEuc6hYyQdjMrvYC253p HQD+pBGw2UZXE2BFLTkivG9t8iFukHtgzF5HZjpUWG78hriDLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ4AfIVCS/plwPm3Eg1vuaB5gqQxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYjVkMWMwNDYtNzQyNi0z MjRkLWI4YzEtY2IyZmU5MjM3NDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFc+NAuXVbUACtGLtMVpFbCpvK9Cp3opr/BnvLPsgGt0NsDz+x/o9mvT BId2BROT1oJUuSaoX/fKAyEKpCMJcpJVvftCR5Alw1fWggWMhJpu0WEIaxshTgyD vus9mQ/tlIE52CvkH4zJInAGRIOv54HZELuQD9LAVSntQz7XLyvafTxh82SoUWZk asOjRQAxsTO3NZeiY6gXqsF7KUtR6zbT1CBk/m8NUxvdEhhuAxpnrH00UuBaemEE 1NeHKFliwGPt0W81FI7uNmB6mkHsIMuchTFqdOUgXfo2QXNdVXYBOKWZYcU65d9x dEaYORZAX5AduDZAPGpVgetBMmG1eg0= -----END CERTIFICATE-----Generated at Sun Apr 6 02:14:12 2025 by rpki-client